CAS Filter Fails When Url Pattern is changed to /*

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.1.30 EE GA3, 6.2.0 CE B2
• Fix Version/s: 6.1.X EE, 6.2.0 CE B2
• Component/s: Accessibility, Application Security, Application Security > CAS, Security Vulnerability
• Labels: None
• Environment: 5.1.4
• Branch Version/s:
  6.1.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/13240

If you want CAS To Work on any page that a user goes to (without clicking login) you can change the filter in the WEB.XML but if you do and go to the server without a url there is a nullpoint ererror in the log and you cannot get to Liferay... I found that by changing the code in com.liferay.portal.servlet.filters.sso.cas.CASFilter

From

if (pathInfo.indexOf("/portal/logout") != -1)

To

if (pathInfo != null && pathInfo.indexOf("/portal/logout") != -1) {

Fixes it.